siberfx/cloudflare-turnstile

Project backingcaution

The registry namespace and repository owner match, providing consistent ownership context. The owner is an individual account, so the single registry maintainer does not indicate organization-backed redundancy.

Release historycaution

This is the package's first release, published today, with only one release and no established cadence. That leaves long-term maintenance and compatibility unproven.

Security policycaution

The repository has no security policy. This is a transparency and vulnerability-reporting gap, especially for a package that handles CAPTCHA verification, although it is not evidence of a defect.

Workflow auditcaution

The sole workflow was fully analyzed with no dangerous audit findings or untrusted checkout and has no top-level write permissions. However, all 4 action references are unpinned, leaving avoidable build-integrity exposure.